Anti-Virus in Kali Linux
Hello fellows nullbyters, first of i will start saying that im addicted to this community, i feel the challenge growing up so fast, all the newbies, amateurs,advanced and professionals hackers around trying their best to help the community, badly but we got some script-kids too but anyway, today we are going to learn how to install and use clanAV in kali linux..
Is no longer true when someone says your Linux or your Mac don't get viruses, despite the Windows be more popular and more obviously targeted by malware, security systems do not always advance as quickly as their vulnerabilities. Fortunately it is possible to learn to protect without many difficulties.
So for guys like me that wanna take security to the paranoid level here we go.
what is ClanAV?
is a set of tools developed originally for UNIX operating systems, in addition to antivirus scan by command lines, it also scans e-mails and has a tool to update the database, as well as other features.
this process is so easy, we can get it using the apt-get commands, so lets start our kali linux
if you are using Kali since half the tools out there would be detected as a virus and whenever you make a payload it would also detect it as a virus. im using kali just to demonstrate how you can use it, you better use it on your own responsibility or in a non hacking distro
apt-get install clamav
To check the syntax and your options use
for the full option you can run
Now lets scan our computer using the clamscan
As you can see from the above screenshot its scanning file by file and flagging it with "OK " that means the file is ok but have a look in that red underline.. it says"PHP -1 FOUND" and from the summary its saying "1 infected file" it means this file contains a virus and even tho this file is actually a shell that i use to test websites for shell upload vulnerability,the test showed us that it can catch knows threats, its good to run it daily so that you can check your files manually and make sure that is a trustable file.
Now you can remove this file manually,using the command "rm" or just run
clamscan -r --remove /directory and it will remove all threats it found
Now lets scan a directory
For this example i will use the download directory as sometimes we might download trash from the internet its good to check every file we download
the "r" means recursive scan
clamscan -r /root/Downloads
Luckily according to clamAv i dont have any threat inside my download folder..
for those lazies nullbyters you can use its gui version
apt-get install clamtk
and after installation run it and start playing with the toys.
for today that is all if you wanna go deep on its full usage just RFM
Note: if you are using Kali since half the tools out there would be detected as a virus and whenever you make a payload it would also detect it as a virus. im using kali just to demonstrate how you can use it, you better use it on your own responsibility or in a non hacking distro
Hacked by Mr__Nakup3nda